← Database

CVE-2022-1040

CRITICAL CVSS: 9.8 Published: 2022-03-25 Modified: 2026-06-17

Description

An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v18.5 MR3 and older.

Affected Platforms

Sophos Sfos

Weakness Type

NVD-CWE-noinfo

References